Active Directory, Group Policy

How to use User Attributes within Group Policy Preferences Item Level Filtering

1 min read

1) Create an environmental variable to store the default value for the user attribute, Mobile (#1) in this case

GPP environment variable for default Mobile attribute

2) Create an environmental variable to store the value for the user attribute, Mobile (#2) in this case

GPP environment variable with LDAP query for Mobile

3) From the Common tab, enable Item-level targeting. Add LDAP query filter and enter the following values

Name

Value

Filter

(&(objectCategory=person)(objectClass=user)(sAMAccountName=%LogonUser%))

Binding

LDAP:

Attribute

mobile

Environmental variable name

usermobile

LDAP query item-level targeting configuration

4) Create an environmental variable to store the positive outcome, NeedsToRun (#3) in this case

5) From the Common tab, enable Item-level targeting. Add environment variable filter as below

Environment variable item-level targeting filter

6) Create an environmental variable to store the negative outcome, NeedsToRun (#4) in this case

GPP environment variable for negative outcome trigger

7) From the Common tab, enable Item-level targeting. Add environment variable filter as below

Negative outcome environment variable targeting filter

The variable NeedsToRun can now be used as a trigger on any Group Policy

Posted on

No comments yet

Comments are moderated and appear once approved.